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(54) Security enabling and switching devices 

(57) The invention provides a removable security 
device (100) which in a preferred embodiment is 
inserted into an existing cigar/cigarette lighter socket of 
a vehicle and acts as an anti-theft system. 

The security device (100) transmits an authorisa- 
tion code through the electrical network of the vehicle. 
The code is detected by enabling devices (200) which 
are connected in series with components (300) of the 
vehicle, e.g. the starter motor and/or fuel pump. When 
the or each enabling device (200) receives a bona fide 
authorisation code it switches on thereby allowing the 
component to be operated. 

302 



As the enabling devices (200) are small they can be 
fitted into components at manufacture or fitted to exist- 
ing components. 

The system has a very low power requirement and 
therefore does not need cooling. It has safety features 
which ensure that if the vehicle stalls the components 
are not disabled. 

An advantage of the invention is that no major mod- 
ifications need to be made to a vehicle. 
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Description 

This invention relates in general to security enabling and switching devices for a vehicle having an electrical power 
supply system. The invention also relates to the enabling and switching devices when used in combination to a vehicle 
when f rtted with such devices, and to a vehicle component incorporating the switching device. The invention relates 
more particularly to security devices of the "immobilisation- type where the enabling device is a electronic "key" bearinq 
a authorisation code and the switching device switches on a vital component of the vehicle (say. the fuel pump (or fuel 
injection system) or starter motor solenoid) only when activated by a key bearing the correct authorisation code 

It is already known from Australian Patent Application No. 58047/90 to provide a security device to prevent unau- 
thorised usage of a vehicle. The security device comprises an electronic key in which is stored a authorisation code a 
decoder for receiving the code upon electronic connection of the key. and an electronic switch to enable operation of a 
component of the vehicle when the key supplies a valid code to the decoder. Dedicated wiring is provided to transmit 
the decoded signal from the decoder to the switch when the key is directly electrically connected to the decoder 

This anangement suffers from several disadvantages associated with the use of this dedicated wiring link Most 
importantly, a th.ef can determine the location of the switch by tracing the wiring from the decoder to the switch Once 
located, the switch can be overridden and the vehicle can be stolen. Also, fitting of the wiring can be time-consuming 
and expensive. ~ a 

Another vehicle disabling device is described in US Patent 4 463 340 (ADKINS). This device has a permanently 
*} Date from »he keyboard is transmitted to a receiver or switch, using a pulse width modulation 
(PWM) technique. This system of data transmission was found to be acceptable for words having a tow number of bits 
m their length. However, as word lengths became longer, in order to enhance security, because clock rates at the key 
(encoder) and receiver (decoder) may differ synchronisation can become difficult. This could lead to corruption of data 
and/or non recognition, by the decoder, of a valid authorisation signal. 

International Patent Application WO-A-8103002 (BLWS AUTOSECURITY CORP) describes a coded engine 
starter system. A modulated carrier signal transmits data to a decoder which decodes the signal and permits a starter 
motor to be started if the signal is bona fide. 

German Patent DE-A-2 503 266 (SVENSKA) teaches a vehicle specific signal source/code generator which 
imposes its code only on the ignition circuit, and specifically isolates this from the rest of the vehicle's power supply by 
the use of a filter. ' 

US Patent US 4 288 778 (ZUCKER) describes a removable digital encoder which mates with a dedicated socket 
dSodef ^ aCCeSSft),e toCati0n 00 the vehide - ne sodkBi 035 a connection to carry data from the encoder to 
Finally US Patent US 4 050 063 (SCHULL) describes a vehicle security system having a mechanical-electronic key 

« ^ ,C L' S !Cfi T. 3 SyStem Up ° n mechanical and electronic unlocking the security system is immo- 

35 bilised and the vehicle may be driven. 

Some of the arrangements described above suffer from the same disadvantages as the device described in the 
above mentioned Australian Patent Application. Others are complex and/or expensive and may be relatively easily 
wired around or bypassed. y 
According to the present invention there is provided a removable security device tor a vehicle, the device havino 
to means for receiving a power supply and means for modifying a characteristic of the supply so as to impart a identifica- 
tion signal to said power supply, a characteristic of which signal is received and read to verify a user's authority and 
which on verification enables the vehicle to be driven. 

Preferably verification is carried out by a decoder which is fitted to a receiver or switch. This receiver or switch then 
permits at least one vital component of the vehicle to be activated or energised and thereby permits the vehicle to be 
45 driven. 

There is also provided a security switching device tor a vehicle having a electrical supply system, comprising a 
switch arrangement for selectively providing electricity from the supply system to a vehide component means fo- 
receiving a security signal superimposed on the supply system and means for actuating the switch arrangement in 
dependence on whether the security signal is valid. " 

An advantage with the aforementioned invention is that it does not require any modification of a vehicle in order to 
use the device, also referred to as a key; and only minor modification to fit one or more receivers, also called switching 
devices, to various actuators, pumps, motors etc. or other so called vital vehicle components in a vehicle to be driven 
By providing the link between the enabling device (key) and the switching device or receiver via superimposition of 
the security signal on the vehicle's existing electrical supply system, rather than through a dedicated wiring link several 
advantages can be achieved. Firstly, the switching device can be difficult or practically impossible to locate since the 
potential th.ef may have no way of tracing its location. Secondly, fitting of the enabling and switching devices can be very 
simple, since no dedicated wiring link between them is necessary. Indeed, several switching devices can be fitted into 
d.fferent circuits without any increase in wiring complexity. Thirdly, since no dedicated wiring link is necessary and the 
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security signal can be transmitted to every active circuit in the vehicle via the existing electrical supply system, there are 
virtually no restrictions on where the switching device or devices may be fitted. 

Although the enabling device (key) may be a concealed switch or the like, for added security it is preferred that at 
least part of the enabling device is removable from the vehicle. This part would be utilised by the user as a "key", and 
5 preferably has an authorisation code stored in electronic form within it. 

In fact, the enabling device could be formed in two distinct parts, namely a "key" part which could transmit (for 
example by radio, electric impluse or infra-red telemetry) the authorisation code, and a receiver part which could receive 
that code and superimpose it as a security signal on the vehicle's electrical supply system. However, it is possible that 
potential thieves would be able to read electronically the authorisation code as it is being transmitted. Therefore, it is 
w preferred that the enabling device (key) further includes connector means for releasabiy connecting the device directly 
to the power supply system. This can provide a relatively simple and secure arrangement. In the preferred embodiment, 
the enabling device is adapted to plug into the vehicle cigar or cigarette lighter socket. No modification of the vehicle is 
then necessary to accommodate the enabling device. 

According to another aspect of the present invention, there is provided a security enabling device for a vehicle hav- 
15 ing an electrical power supply system, comprising means for selectively superimposing a security signal on the power 
supply system, characterised in that the device is adapted to be inserted into a cigar/cigaretter lighter socket. 

Preferably, the security signal takes the form of a carrier signal which is frequency modulated by an authorisation 
code in order to enhance signal/noise ratio. However, the authorisation code could alternatively be superimposed 
directly on the supply system. 

20 Considering now the switching device in more detail, this may conveniently be arranged to switch the starter motor 

solenoid or the fuel pump, or both, or indeed any other electrical circuit or circuits. If the device is fitted on the vehicle 
from new, it could be fitted within the housing of the relevant component. Or this could be effected at the point of man- 
ufacture of the fuel pump, starter motor, servo system, headlamp, ignition system or any other electrical component 
used in a private or commercial vehicle. If the device is "retro-fitted", then it would usually be placed some distance 
25 away from the relevant component, to hinder location of the device by a potential thief. 

For added security, it is preferred that the switching device further comprises means for refusing further security 
signals if an invalid security signal is received. This can prevent a potential thief using an automatic scanner to scan 
quickly through all possible authorisation codes. 

Again for added security, if the security signal is repetitive, it is preferred that the refusing means is arranged to 
30 refuse further security signals if a predetermined plurality of invalid security signals are detected. This removes the 
problems which might be encountered if a potential thief is operating equipment designed to circumvent the security 
system. Alternatively or additionally, the refusing means may be arranged to refuse further security signals if a valid 
security signal is not received within a predetermined interval from when power is first supplied to the device. (It is 
appreciated that the term "power" in this context, means the supply of electrical current from the vehicle s electrical sup- 
35 ply). This can prevent a potential thief from scanning for the correct authorisation code. Dummy devices may also be 
fitted to various actuating devices. 

If the vehicle has an operating switch, such as an ignition switch, preferably the switching device is arranged to 
operate only when the operating switch is switched on. This can provide added security. In particular, it can prevent a 
potential thief scanning possible authorisation codes, unless the thief also has the vehicle operating switch key. 
40 Preferably, the switching device or enabler further comprises means for latching the switch arrangement once actu- 
ated by a valid security signal.. This could, for example, prevent inadvertent (and possibly dangerous) stalling of the 
vehicle in the event that the user were to disconnect his security key. The latching means may conveniently be arranged 
to maintain the switch arrangement latched even when power is removed from the switching device. This can facilitate 
the switching of intermittent loads. In addition energy storage means, such as for example a battery or a capacitive 
45 device, may be arranged via suitable switching arrays, such as transistors and FETS. to ensure that a device is held in 
a latched state in the event of a voltage fluctuation. 

A constant current source may be employed to source current to the Zener diode in the voltage regulator in the key. 
This may comprise a constant current source similar to that used in the switching device or simply a resistor in series. 
Preferably, the switching device has only two external electrical terminals. By providing a "two-pin" rather than a 
so "three-pin" device, fitting of the device to the vehicle can be greatly facilitated. One terminal can be fitted directly to the 
relevant component, whilst the other can be fitted directly to the supply line. Similarly the device may be fitted between 
the load and ground. Thus no extra wiring need be used. 

The switching device has a high input impedance to prevent attenuation of the security signal. This may be partic- 
ularly important if the device is of the two-pin type and if further (as would often be the case) the load is inductive and 
55 has a high impedance at the carrier frequency. 

The invention extends to the security enabling and switching devices as aforesaid, possibly in kit-of-parts form. 
For added security, a plurality of security switching devices may be provided. This can greatly reduce the chance 
of the security system being successfully overriden. 
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doctor SSS Ic ,T ^ ** tm,nQ enCOdin9 ° f the S6Curity si9na) and 4,16 «*«n8 device includes a 
clock for t.m.ng the decoding of the Means rs preferably provided to synchronise the two clocks This can afford 

" \£t£Z£!^Z" ,e " ab '" ,y " ad ° ,,,0n - 3S Sta,6d ab0V6 ' tnere.iabi.ity of thesv^^dS 

and the enabling devce when securrty codes of long word length are used. Typically words may comprise 20 bite In the 
absence of any synchronise means. m.smatch due to temperature or voHage changes, or variation Lmponert 2 
erances/ageing. could cause manunct.cn P.e.erably each Cock rate is tied to the Jrier signal Cuen^ 

OYto ^ e , inven,,on also ^ ends to a when fitted with any of the security devices as aforesaid and similarly it 

extends to a component fitted with a switching device. similarly it 

A further advantage of the key compared to permanently connected interface is that the key of the present invention 

Wh^T 11 ° m tMy ' me,eby Pf0ducin9 a v0,taae dr °P ™* ^ sensed Z*^S£££ 

Wh,. e such an arrangement may be satrsiactory if the interface means is permanently affixed to the vehicle We current 
drawn (and hence power dissipated, * proh.brt.ve if it is wished to remove the interlace or key. 
Other advantages of the present invention are: 

figU SSonsfwS l^Tt! ^ ** band radi ° ' reqUen< ^ radiation "" ich with 

legal restrictions (which may prevent commercial use of the system)- 

b) The interlace sources current onto the vehicle s electrical supply as well as drawing current from it and 

c) Power diss.pat.onm the key or enaMer rs reduced to a sufficiently low level ' 
to make a removable interface/encoder passable ad to avoid the need for a heat sink. 

^IZ^JL^ inVentK>n ^ d6SCTibed ' by ^ " 6Xamp,e "* «* — — ^ accom- 

Rgure 1 is a perspective view of a securrty enabling device according to the present invention 
Receiver;: 3 ^ ^ ° f a " """^ **» kf * and a securi * ^hing device 

Figure 3 is a more detailed block diagram of the enabling device; 
Figure 4 is a circuit diagram of the enabling device; 
Figure 5 is a more detailed block diagram of the switching device; 
Figure 6A is a circuit diagram of the switching device; 
Figures 6B and 6C show circuit diagrams tor the alternative switching drives and 

Figures 7A. B and C are sketches of output characteristics for the circuits shown in 6A. B and C respectively. 

nin„ R ff rrin9 w H? 1 " 6 1 ;■ 3 SeCUri,y enablin9 device 1 00 tekes ,h e form of an electronic "key" which is capable of olua- 
g.ng into a vehicle s ex,st,ng cigarette lighter socket (not shown). Externally, the key is of converrtton^ape e££L 
that rt rs provided wrth a f tat extended portion 1 02 having a hole for enabling the key to be IllSmtaJ 3* Tne S 
^1Z TT C C ' rCU,try - 35 Wi " ^described later. A light emitting diode (LED) and/or audWeXm may S in^nT 
the^ to ^ 

Referring to Figure 2. the key 100 rs incorporated in a security system for a vehicle which also includes a seorrtv 

T "2 f^S?? '? SWitChin9 3 ,0ad 300 "** be a <"« component suTas SSS^SSd 

30? ^ ™ the , key l 0 ° and device 200 <™*~ «««* via vehicle ignition switch Jo^m 

304. The key 100 rs plugged into the vehicle via the cigarette lighter socket 306 7 

?^ ati0n - Un,ess the kt * 100 is inser1e d into the cigarette lighter socket 306 the switching device 200 maintains 
the toad 300 swrtched off even if the ignition switch 302 is switched on. Thus, if the load is for example a *aZ S 
sdenoid or fue. pump, the vehicle wil. be effectively immobilised unless the key 100 is inserted Zl the^celS 
will not have receded an authorisation signal from the key. A secure authorisation code is stoS on^e key ^ ce ^e 
?♦ j?V S i nSer,ed int ° thG " 9hter S0Ck6t ^ rt Wi"W6 on the vehicle power supply s «t^i 7sSur^s«S 
related to the authorisation code. This signal is received by the switching device via thT™ Tur^^tem Tr^ 

JSK ^ rred embodimen1 - ,h * ^9nal is a repeating 20 bit word, so that over one m .2 

(10°) authorisation code combinations are possible. mimon 

Referring now to Figure 3. the key 100 comprises in general terms a voltage regulator and indicator 104 a code 
generator 106. a voHage controlled oscillator 108 and an output amplifier 110. TheSde generatoT^erJes toVo- 
duce the automation code, whilst the voltage controlled oscillator 108 serves to produce an SS^S 

sss xzf£z:" n code Each ot * e c °™ — - — * 
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(a) Voltage regulator and indicator (104) 

Light emitting diode LED1 is connected from + 12V (from the vehicle battery) to resistor R1 which is in turn con- 
nected to the cathode of zener diode ZN1 , the anode going to 0 volts. A.C. decoupling is provided by capacitor C1, the 
s whole forming a shunt regulator. 

Current flows from 12V via LEDT and R1 to ZN1 . ZN1 provides the voltage regulation. In the process LED1 is illu- 
minated, indicating that the circuit is energised. This illumination appears as a light visible on the housing of the key 1 00. 

(b) Code generator (or encoder) (106) 

10 

Integrated circuit IC1 is a serial EEPROM containing the authorisation code and operating mode data. It is con- 
nected to code generator IC2. IC2 is connected to 5V via resistor R2 and to the voltage controlled oscillator (VCO) 108 
via Capacitor C1. Its reset pin is also connected to 5V via resistor R3 and diode D1 t and to OV via capacitor C2. Its 
output pin is connected to integrated circuit IC3 via resistor R4. Resistor R3, Capacitor C2 and diode D1 provide elec- 

75 trical power on reset to IC2. 

The output of the voltage controlled oscillator 1 08 is used as a clock for the code generator IC2, and is transmitted 
via capacitor C1 to the dock input pin (5). Thus the time base for the serial data is tied to the output carrier frequency 
and thence eventually to a corresponding decoder clock on the security switching device, in order to avoid temperature, 
supply voltage, or ageing mediated frequency mismatch between encoder and decoder. 

20 The code generator 106 produces a 20 bit pulse width modulated (PWM) data stream, which is connected to the 
offset pin (12) of the voltage controlled oscillator 108 via R4. 

(c) Voltage controlled oscillator (108) 

25 IC3, a phase locked loop (PLL) IC, used to perform a voltage controlled oscillator function. The frequency of oscil- 
lation is determined by capacitor C3 and the current flowing through resistors R4 and R5. and in this embodiment is set 
at 100 kHz. It will be understood that other frequencies may be chosen, the choice depending partly on legal require- 
ments. Resistor R6 and capacitor C4 maintain the correct operating conditions for the voltage controlled oscillator 
(VCO). Since the voltage applied to R4 is either 5V or OV according to the data instantaneously present, the oscillation 

30 frequency varies with the data. In this embodiment, the variation is N* 5kHz. 

(d) Output amplifier (110) 

The output amplifier 110 consists of transistor TR1, resistors R7. R8. R9and R10, inductors L1 and L2. andcapac- 
35 itors C5andC6. 

The key 100 superimposes data on the 12 volt power supply system of the vehicle by alternately drawing current 
from the battery 304 and then returning it, at the frequency of the voltage controlled oscillator. Since the battery and its 
immediately associated wiring has a finite resistance, the current drawn results in a small voltage being superimposed 
on the supply. 

40 The square wave output of the voltage controlled oscillator 108 passes via R7 to TR1 and R8. TR1 thus turns on 
and off, and sinks collector current via R9 and R10 at the oscillation frequency. L1/C5 and L2/C6 form series resonant 
circuits having centre frequencies typically at 105 kHz and 95 kHz respectively. With a supply voltage of 12 volts each 
carries a resonant current of N fi 150 mA, which typically corresponds to a voltage variation of N 2 10 to N 8 20 mV super- 
imposed on the supply voltage. The peak current drawn from and returned to the battery 304 with each cycle is there- 

45 fore 300 mA, whilst the power dissipation in TR1 js minimal (of the order of a few mW only). One effect of the use of 
series resonant circuits is that the output waveform approximates to a sine wave. 

Referring now to Figure 5, the switching device 200 comprises in general terms an input filter 202, an input amplifier 
204, a phase locked loop tone decoder 206, a pulse shaper 208, a decoder 210, a timer 212, an output latch 214, and 
a power supply 216. The output latch 214 functions in part as a switch arrangement to provide power from the power 

so supply system to the load 300 (vehicle component); the decoder 210 functions in broad terms to actuate the switch 
arrangement in dependence on whether the security signal is valid, and most of the remaining components perform the 
function of receiving (and processing) the security signal from the vehicle power supply system. Each of the compo- 
nents mentioned above is now described in more detail with reference to Figure 6A, which shows one embodiment of 
the arrangement. 

55 

(a) Input filter (202) 

The input filter 202 consists of capacitor C7 and inductor L1 connected in series. 
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The security signal is received as an authorisation code modulated on a 100 kHz carrier superimposed on the vehi- 
cle's 12 volt supply system. Capacitor C7 and inductor L3 form a series resonant circuit at the carrier frequency, 
enhancing the sensitivity of the receiver at this frequency and minimising it at others. 

(b) Input amplifier (204) 

The input amplifier 204 consists of two operational amplifiers in integrated circuit IC4, capacitor C8 and resistor 
R1 1 associated with the first operational amplifier, and capacitor C9 and resistors R12 and R13 associated with the sec- 
ond operational amplifier IC4. 

The security signal is coupled by C8 from the input filter 202 to the inverting input of the first operational amplifier 
IC4, and the amplrfied output is capacrtively coupled by C9 to the second amplifier formed by R12, R13 and the second 
operational amplifier IC4 The gain of the combination is such that under normal operating conditions the output clips 
to supply rails. 

It will be appreciated that the function of the input filter 202 could be carried out by the input amplifier 204, by con- 
figuring IC4 to act as a band pass filter. 

(c) Phase locked loop tone decoder (206) 

The phase locked loop tone decoder 206 consists of capacitors C10, C1 1 and C12, resistors R12 to R1 5, and inte- 
grated circuit IC6. 

IC6 is a phase locked loop and carrier demodulator. In the absence of the security signal it "free runs" at a fre- 
quency determined by R12. Rl3 and C10 of approximately 100 kHz. The output signal from the input amplifier 204 is 
coupled by C11 to an mjxi buffer, and then compared with the local voltage controlled oscillator in an exclusive OR 
phase comparator The of the comparison passes to a low pass fitter formed from R14, R15 and capacitor C12, 
and controls the osolaton frequency of the voltage controlled oscillator. The voltage controlled oscillator is thereby tied 
to the security signal ca-r»er frequency, and follows the variations in it which represent the superimposed data (that is. 
the authorisation code) This allows the data to be recovered (the carrier demodulated) by the low pass filter. The 
demodulated data is presented to the pulse shaper 208 at the junction of R15 and C12. 

(6) Pulse shaoer (2Q 8) 

The pulse shaper 208 consist of capacitors C13 and C14, resistors R16, R17. R18 and R19. and two operational 
amplifiers in integrated or curt »C6 

The input data to the puts* snaper consists of a repeated pulse width modulated data stream, the words being sep- 
arated by a pause durng w^ch the output of the phase locked loop is not clearly defined. Data corruption may occur at 
the start of a word as a resort The input data is coupled by capacitor C13 to an inverting amplifier formed by R16 and 
R1 7 and an operational ampr*** (part of C6). In order to define the state of the data stream between words the data 
is differentiated by Ci4 and Ri8 to extract the signal transitions. The differentiated signal is then reconstituted by the 
second operational amp**** and R18 and R19 which form a Schnmtt trigger, the output of which only changes state 
when the differentiated data crosses its thresholds. The original data is thus regenerated, but the output remains "low" 
during the pause between words 

(e) Decoder (210) 

The decoder 210 consists of capacitors C15 and C16, resistors R20 and R21, diode D2, and integrated circuits IC7 
and IC8. 

As in the code generator (encoder) 106. "power on reset' is provided, in this circuit by R21, C16 and D2. The 
authorisation code is contained in IC7 (Serial EEPROM), whence it is read by the decoder proper (IC8). The decoder 
clock is derived from the phase locked loop voltage controlled oscillator (which is synchronised with the encoder clock 
in the key 1 00) via C 1 5 and R20 The data from the pulse shaper is passed to the input of IC8 where it is compared with 
the authorisation code read from IC7 It the two correspond then the comparison is repeated for the following word. If 
both are correct then the decoder output changes state (from 5V to OV). If both are the same but incorrect then the 
device assumes attempted unauthorised use and refuses all further codes for 2 seconds. This refusal function is carried 
out in IC8 and is additional to the refusal function carried out in the timer 212. 

(ft Timer (212) 



The timer 212 consists of an operational amplifier which is one quarter of IC6, resistors R22 to R24, and capacitor 
C17. 
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Before a pair of valid codes has been received the output of the decoder 210 will be 5V. The inverting input (-) of 
the operational amplifier will therefore be at 5V via R22 and R23, and therefore its output will be at OV. The non-invert- 
ing input (+) will start at 2.5V (2V5), but will discharge via R24 towards OV over five seconds, the time constant being 
defined by R24 and C1 7. If the decoder output goes to OV within five seconds, then the operational amplifier output will 
5 go high to 5V, triggering the output latch 214. If, however, the voltage on the non-inverting input is close to OV then the 
output of the operational amplifier will remain at-OV irrespective of the state of-the decoder-output - 

Thus the user has five seconds from when electrical power is supplied to the security switching device 200 by 
switching on the ignition switch 302 to transmit a valid security signal to the switching device. If a valid signal is not trans- 
mitted in that time, the device refuses further security signals until power has been disconnected and re-supplied to it. 
w In practice (if, say, the load were the fuel pump) a potential thief attempting to scan through possible authorisation codes 
would have to turn the ignition switch 302 on and off many times before the correct authorisation code were found. This 
would usually be impractical. 

It will be appreciated that the five second period could be set by EPROM or some other suitable timing device rather 
than capacitively. 

15 

(g) O u tput fr tCh (214) 

The output latch 2 1 4 consists of resistors R25 to R33, capacitors C1 8 and C1 9, diodes D3 and D4, transistors TR2 
to TR5, Field Effect Transistor FET1, and zener diode ZN2. 
20 The output latch has to fulfil several functionsr- 

1) once triggered it must remain active when the key 100 is disconnected; 

2) once triggered it must remain active for several seconds even after power has been removed (so that it can 
switch intermittent loads, and. if the vehicle is stalled, so that it can permit the vehicle to be promptly restarted (e.g. 

25 if the switching device is used to switch the vehicle fuel pump)); 

3) it must remain latched in the presence of a varying load current; 

4) it must have a low power dissipation; 

5) it must have a very low quiescent power consumption; and 

6) it must be reverse and over voltage protected. 

30 

In order to minimise power dissipation an enhancement mode field effect transistor is used as the output element. 
This requires a gate source voltage of greater than 4 vorts to ensure a low "ON" resistance, ad this is supplied by C1 9, 
via R30 and R32. 

When power is first applied from the power supply system by switching on the switch 302. the output of the timer 

35 212 is at OV, TR2 is held off, and TR3 therefore receives base current via R28 and conducts. C19 is not charged; there- 
fore TR4 is off, base current is not drawn from TR5, collector current does not flow in TR5, and thus TR4 remains off. 
The circuit remains in an off state, with C1 9 discharged; FET1 remains off and therefore current is not permitted to flow 
through the load 300 to any significant extent. 

If the timer output goes to 5V (i.e. on acceptance of a valid authorisation code via the security signal) then C19 

40 charges through R25 and diode D4. When the voltage across CI 9 reaches about 1 .5V TR4 conducts, turning on TR5 
and rapidly charging C19, until the voltage across C19 reaches 6V. TR2 remains off and therefore the charging contin- 
ues. When 6V is reached TR2 conducts, turning off TR3, TR4 and TR5 and stopping the charging process. In turning 
TR3 off, the gate of FET1 is allowed to rise to the voltage on C1 9 and therefore it conducts, supplying power to the load 
and in the process reducing the voltage across the terminals of the switching device 200 to a few mV 

45 As the gate voltage of FET1 falls towards the gate source threshold voltage (which in the present embodiment 

takes several minutes), the drain source resistance and therefore voltage rises. When it reaches 600mV TR3 conducts, 
forcing the FET hard off. The voltage across the circuit rises towards 12V, but since the voltage on C19 exceeds the 
1 .5V necessary to force TR4 into conduction, TR4 and TR5 conduct, recharging C1 9 quickly to 6V. 

Thus every few minutes FET1 flips very briefly (for about 20ms) into an off state while its reservoir capacitor (C1 9) 

so is refreshed. The latch continues to conduct load current, but this flows into C19 rather than through FET1 . A sketch of 
the output characteristics of output latch 214 is shown in Figure 7 A. 

When the circuit is de-energised for longer than the time taken to discharge C1 9 below 1 5V (this time being several 
minutes), it turns off until retriggered by the timer 212. The discharge current flows in leakage current through diodes 
D3 and transistors TR3 and TR4. 

55 FET1 contains a reverse diode between drain and source, to protect against reverse voltage, while overvoltage 
spikes are clamped by Zener diode ZN2. 

It will be appreciated that the field effect transistors could be replaced by, for example, a thyristor. However. FETs 
are preferable because they allow, in a simple fashion, the switching device 200 to be two terminal rather than three ter- 
minal; they dissipate less power (thereby avoiding heat sinking with a consequent increase in the size of the device); 
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and they permit the device to switch intermittent loads (e.g. electric motors) easily. Another possibility is that the or each 
FET could be replaced by a Insulated Gate Bipolar Transistor. 

(h) Power supply (21 fi) 

5 

The power supply 216 comprises two units 216A and 216B. The output from 216A is 5V from a constant current 
source IC9 andn Zener diode ZN3. The input of 216B is fed with this 5V and the op-amp (IC6) generates a supply volt- 
age of 2.5V which is fed to IC6 as shown at 208. and 212 and IC4 at 214.. 

The power supply 216 consists of integrated circuits IC9 and IC6, Zener diode ZN3, resistors R34A, R35A and 
10 R36A, and capacitor C20A. 

The whole switching device 200 is a two terminal device, that is. it is placed in series with the load to be switched. 
Furthermore, the security signal is superimposed on the electrical supply supplied via these two terminals. 

The power supply 216 presents a high impedance at the signal carrier frequency, while providing decoupling of the 
regulated supply. This is achieved by the use of a decoupled shunt regulator (formed by ZN3 and C20) supplied by a 
constant current source IC9 and resistor R34. The constant current source presents a very high impedance to the sig- 
nal component of the 1 2 V supply. 

R35 and R36 form a potential divider across the regulated supply, which is buffered by part of IC6 to sudoIy the 
2.5V (2V5) rail. J 

The rate of data transmission may be increased, in alternative embodiments of both the key and the switching 
device, by placing a divider: in the key between the output of the Voltage Controlled Oscillator (VCO) and resistor R7; 
and in the receiver (switching device) between the output of the VCO (in the PLL) and reference input of the PLL phase 
comparator. That is between pins 3 and 4 of IC5 as shown on Figure 6A. This frequency divider arrangement allows the 
ratio of the encoder/decoder dock frequencies to the signal carrier frequency to be varied. 
The two terminals of the switching device 200 are designated T1 and T2. 

Both figures 6B and 6C refer to alternative arrangements for the output latch 214 shown in Figure 6A. 
The circuit in figure 6A. uses an FET as the output device for the reasons discussed above. That configuration 
resulted in a latch which remained in a latched state for approximately 30 seconds and was then refreshed. The "latch- 
remained in an off state for a period of about 20ms. as shown in graph 7A. That is when the output voltage exceeds the 
threshold shown by the dotted line in Figure 7A. This output characteristic in the latch may have presented problems in 
certain jurisdictions as it could be considered dangerous for a power supply within a moving vehicle to be in an off state, 
albert only for 20 microseconds, and then switched on again. The arrangements shown in figures 6B and 6C and 
described below overcome this problem. 

Figure 6B shows a modified version of the arrangement of the latch 214 in Figure 6A. 

An additional integrated circuit IC 9 an uftralow power astable murtrvibrator forms a flyback generator which, when 
the switching device 200 is latched on. takes electrical power from across the field effect transistor FET 1 . 

The flyback generator consists of IC 9. D 5 to D7. C 20 to C 22. R 34 to R 36. L 2. TR 6 and FET 2, IC 9 is supplied 
with electrical power from C 20 and oscillates at a frequency determined by C 21 and R 34 (in this embodiment at 
2KHz). It supplies the gate of FET 2 with a square wave via R 35. When FET 1 is conducting, its drain source voltage 
is between 50mV and 300mV and this voltage is available across FET 2 and its drain load, inductor L 2. The back EMF 
generated when FET 2 is turned off is sufficient to drive current through capacitor C 22 and D 6 onto C 20. and thence 
via D 5 onto C 19. Provided the voltage across FET 1 exceeds 50mV the flyback generator charges C 1 9 and C 20 to 
greater than 4 volts, and thus holds FET 1 on via TR 4 (Built in base emitter resistors) and R 37. Since the energy stored 
in the inductor L 2 in each cycle exceeds the power required to drive the flyback generator the circuit is self sustaining 
maintaining the voltage on C 19 and C 20. 

If the output latch is off and switch 302 is on. then the voltage across FET 1 exceeds 600mV, TR 6 conducts holding 
FET 2 OFF. maintaining the latch in a OFF state. Protection of inductor L 2 and field effect transistor FET 2 is also pro- 
vided by this means. The latch is turned on when the timer 212 output rises to 5V. Current flows via resistor R25 and 
diodes D4 and D5 to charge C19 and C20 and via R37 to the gate of FET 1 . 

If the current through the load (and thus through FET 1) rises, the voltage across the drain source of FET 1 will rise 
and since this is driving the flyback generator its output will increase, raising the voltage across C 19 and C 20 and 
therefore turning FET 1 harder on. The circuit therefore automatically adjusts to hold the voltage across FET 1 
drain/source at approximately 50 to lOOmV for currents between 10mA to 2 amps. Therefore electrical power is contin- 
uously applied to the load 300, and the output FET does not -refresh" but remains permanently ON. 

If electrical power is removed for short periods of less than 1 second, then when it is reapplied the voltage across 
55 C 20 will be sufficient to restart the oscillator. IC 9 and the system remains ON with the flyback generator running If 
however electrical power is removed for several seconds then C 20 will have discharged and the oscillator will not 
restart FET 1 will however remain ON if the voltage across C 19 exceeds about 3V5. C 19 will gradually discharge 
(about 30 seconds) until the voltage across FET 1 drain/source exceeds 600mV At this point two things happen simul- 
taneously. The first is that TR 6 turns on via resistor R 36. This has the effect of holding FET 2 in an off state in order 
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to protect it. Secondly transistor TR 3 turns on via resistor R 28, and C 19 and C 20 charge via transistors TR 4 and TR 
5 and diodes D 4 and D5. Capacitors C 19 and C 20 charge to approximately 7 volts at which point transistor TR 2 turns 
on and this has the effect of stopping the charging process by turning off transistor TR 3. FET 1 is then turned back on 
and as the voltage across the drain source of FET 1 falls below 600mV, transistor TR 6 is once again turned off and the 
5 flyback generator restarts. The circuit is therefore back to operation in its normal ON state. 

If TR 6 were not activated to protect FET 2 then it might be switched on when the voltage across inductor L 2 and 
FET 2 were about 12V. This would result in excessive current flowing with the risk that at least one of the components 
would be damaged. 

Figure 6C is an alternative latch arrangement and consists of a relaxation oscillator/flyback generator which is ena- 
w bled when the voltage across the output field effect transistor FET 3 exceeds 600mV and recharges C 42 and the FET 
3 gate, turning the latter back on. 

R42 to R 46, TR 9 to TR 12, C 40 and inductor L 5 form a relaxation oscillator based on L 5 which will operate from 
voltages as low as 1 volt. The period of oscillation is dependant on the time taken for the current through inductor L 5 
and resistor R 46 to rise to the level at which the voltage across the resistor is sufficient to turn on transistor TR 9, and 
is thus TR 10. As a consequence TR12 turns off. the inductor current falls to zero and the cycle repeats. The back EMF 
generated is sufficient to drive current through C 41 and D 1 1, charging C 42. 

When the latch is in its ON state the gate of FET 3 is connected to C 42 via transistor TR 1 5 and resistors R 51 and 
R 52, as long as the voltage across FET 3 drain/source is less than 600mV, transistor TR 14 remains off. As C42 dis- 
charges (over approximately 30 seconds) the drain/source voltage rises and when it exceeds 600mV transistor TR14 
20 turns on. 

This has three effects, firstly the gate of FET 3 is slowly discharged via resistor R 53. Secondly, transistor TR 1 5 is 
held off for a period defined by resistor R 51 and capacitor C 44. Thirdly if the voltage across C 42 exceeds 800 mV tran- 
sistor TR 13 conducts, turning on TR 11 and enabling the oscillator. Capacitor C 42 rapidly discharges via resistor R 50 
, TR 13 and TR 14, pulling the voltage on the field effect transistor FET 3 gate down via diode D 12 and resistor R 52. 

25 As the gate/source voltage falls the gate/drain voltage rises until about 1 volt is reached when the oscillator starts. C 42 
is recharged, from the back EMF of inductor L5 via C41 and D1 1 . FET 3 gate remains isolated for the duration of the C 
44. R 51 time constant. Capacitor C 42 is therefore charged above the field effect FET 3 gate threshold, (to approxi- 
mately 8 volts). During the charging cycle the voltage on C 42 exceeds that on the field effect gate, which therefore 
remains isolated, diode D 12 being reverse biased. The FET 3 drain/source voltage is therefore not allowed to exceed 

30 the start up voltage of the oscillator. 

At the end of the C 44/R 51 time constant transistor TR 15 reconnects C 42 to FET 3 forcing it hard on. The cycle 
thus repeats itself and refreshes approximately every 30 seconds. However, unlike the latch arrangement (214) in figure 
6A the FET 3 only switches off partially to a voltage of approximately 1 volt for a period of 200 microseconds every 30 
seconds. Switching characteristics are shown in 7 A, 7B and 7C in which these figures show the characteristics for the 

35 respective latch circuits 6A, 6B and 6C. 

Components referred to above are now accorded typical values in the parts' list below, it will be appreciated that 
these values are given by way of example only and certain components may be substituted by others of different values. 
For example it may be desirous to vary a frequency of modulation or a time constant or Q value of a resonant circuit. 
Those skilled in the art will accordingly vary the components as required in accordance with the desired or required cir- 

40 cuit characteristics. 
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TYPICAL PARTS VALUE ] 


R1 = 390 R 


M^y = 4K7 


C7 = 3n3 


I D8 = 1N4148 


R2 = 18K 


Don A. W~r 

rUJU = 4K7 


C8 = 270pF 


D9 = 1N4148 


R3 = 100K 


R31 = 4K7 


C9 = 330pF 


D10 = 1N4148 


R4 = 470K 


R32 = 4K7 


C10 = 47pF 


IC1 = 93C06 


R5 = 22K 


R33 = 47 R 


C11 = 1nF 


IC2 = 57C200 


R6 = 100K 


R34 = 3M3 


C12 = 10nF 


IC3 = 74HC4046 j 


R7 = 3K3 


R34A = 5R6 


C13 = lOOnF 


IC4 = TL072 


1 R8 = 10K 


R35 =4K7 


Cl4=1nF 


ICS = 74HC4046 


I R9 = 470R 


R35A = 100K 


Cl5 = 220pF 


IC6 = LM660 ! 


R10 = 470R 


R36 = 100K 


C16= 100nF 


IC7 = 93C06 | 


I R11 = 150K 


R36A= 100K 


C17 = 470nF 


IC8 = 57C200 | 


I R12 = 4K7 


R37 = 4K7 


CI 8= 10nF 


IC9 = CD4047 


1 R12A = 22K 


R42 = 4K7 


Cl9 = 220nF 


IC9A = LM334 


1 R13 = 1 50 K 


R43 = 4K7 


C20 = 220nF 


ZN1 = 5V1 


R13A = 1M 


R44= 100K 


C20A = 100nF 


ZN2 = 18V | 


R14 = 47K 


R45 = 100K 


C21 = 47pF 


ZN3 = 5V1 


I R15 = 2K2 


R46 = 39R 


C40 = 47pF 


ZN4 = 18V j 


R16 = 10K 


R47= 100K 


C41 =2n2 


ZN5 = 18V 


R17 = 330K 


R49 = 470R 


C42 = 22nF 


LI = 100mH 


R18 = 100K 


R50 = 100K 


C43 = InF f 


L2= ICOmH j 


1 R19 - 3QOK 


R51 = 1M 


C44 = 560pF 


L3= 1mH 


I R20 = 18K 


R52 = IK 


C45 = 330pF 


L4 = 470mH 


R21 = 1O0K 


R53 = 100K 


C46 = IOOdF 1 


1 ^ — 47fW»U 1 
Lo — *f fUTTlri 1 


R22 = 100K 


C1 = 220pF 


D1 = 1N4148 


FET1 = IRFD16N05 


R23 = 1M 


C2= 100nF 


D2 = 1N4148 


FET2 = VN10KM 


R24 = 10M 


C3 = 47pF 


D3=1N4148 


FET3 = IRFD16NQ5 


R25 = 2K2 


C4 = 47nF 


D4=1N4148 




R26 = 10K 


C5 = 27nF 


D5 = 1N4148 




R27=1K 


C6 = 33nF 


D6 = 1N4148 




[ R28=100K 




D7 = 1N4148 
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JlTl b 4 e ." nde ^ tood * at the P resent inve "«°" has been described above purely by way of example, and modifica- 
t,ons of deta.l can be made wrthin the scope of the invention. For instance, the security signal could beTna^ed Z 

For example, different switching devices could be actuated in different ways 

t rt no^ i,ar, L for ^f"^ 6 ' Variati0n ™ y be made to the inventk > n such *»t ^e device is incorported into a conven- 
tional infra red car alarm and/or central locking system. conven 
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Claims 



w 



1. A security switching device for a vehicle having an electrical power supply system, comprising a switch arrange- 
ment for selectively providing power from the power supply system to a vehicle component, means for receiving a 
security signal superimposed on the supply system and means for actuating the switch arrangement in depend- 
ence on whether the security signal is valid. ■- - 

2. A device according to Claim 1 further comprising means for refusing further security signals if an invalid security 
signal is received. 

3. A device according to Claim 2 wherein the security signal is repetitive and the refusing means is arranged to refuse 
further security signals if a plurality of repetitions of an invalid security signal is detected. 

4. A device according to Claim 2 or 3 wherein the refusing means is arranged to refuse further security signals if a 
is valid security signal is not received within a predetermined interval from when power is first supplied to the device. 

5. A device according to any preceding claim further comprising means for latching the switch arrangement once 
actuated by a valid security signal. 

20 6. A device according to any preceding claims having only two external electrical terminals. 

7. A device according to any preceding claims having a hig^i input impedance. 

8. A removable security device for a vehicle, having means for receiving a power supply and means for modifying a 
25 characteristic of the supply so as to impart an identification signal to said power supply, a characteristic of which 

signal is received and read to verify a user's authority and which on verification enables the vehicle to be driven. 

9. A removable security device for a vehicle having an electrical power supply system, comprising means for selec- 
tively superimposing a security signal on the power supply system, characterised in that the security device is 

30 adapted to be inserted into a vehicle's cigar/cigarette lighter socket. 

10. A device according to Claim 8 or 9 further including connector means for releasably connecting the device directly 
to the supply system. 

35 11. A device according to Claims 8 to 10 wherein the security signal takes the form of a carrier signal which is fre- 
quency modulated by an authorisation code. 

12. A device according to Claims 8 to 1 1 including means for providing a perceptible signal in dependence on whether 
the device is connected to the supply system. 

40 

13. A combination comprising a security enabling device according to any of Claims 1 to 5 and a security switching 
device according to any of Claims 6 to 1 2. 

14. A combination according to Claim 13 wherein a plurality of security switching devices is provided. 

45 

1 5. A combination according to Claim 13 or 14 wherein the enabling device includes a clock for timing encoding of the 
security signal and the switching device includes a clock for timing the decoding of the signal, and means is pro- 
vided to synchronise the two clocks. 

so 16. A vehicle when fitted with apparatus according to any of the preceding claims. 

17. A vehicle when fitted with a device according to any of Claims 6 to 12 wherein the device is arranged to operate 
only when the vehicle operation switch (such as the ignition switch) is switched on. 

55 18. A vehicle component including a device according to any of Claims 6 to 1 2 fitted within the housing of the compo- 
nent. 
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